CVE-2024-46737

A flaw was found in the nvmet-tcp component of the Linux kernel. This vulnerability occurs when the allocation of commands fails, leading to a NULL pointer dereference. A local attacker could exploit this flaw to trigger a kernel crash, resulting in a Denial of Service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the nvmet-tcp kernel module from loading. This can be achieved by blacklisting the module.

1. Create a new file /etc/modprobe.d/blacklist-nvmet-tcp.conf with the following content:

   blacklist nvmet_tcp
   

2. Rebuild the initramfs to ensure the blacklist is applied during boot:

   dracut -f -v
   

3. Reboot the system for the changes to take effect.

This mitigation may impact systems that rely on NVMe over TCP functionality.